@agentguard-run/mcp

@agentguard-run/mcp

AgentGuard® as an MCP server: local spend caps and Ed25519-signed provenance receipts for AI agent actions, usable from any Model Context Protocol host (Claude Desktop, Claude Code, Cursor, Cline, or your own agent runtime).

Zero data plane. Tools accept metadata only: model names, token counts, endpoint URLs. Prompts and completions never pass through this server, and nothing leaves your machine. Receipts are content-free.

Install

{
  "mcpServers": {
    "agentguard": {
      "command": "npx",
      "args": ["-y", "@agentguard-run/mcp"]
    }
  }
}

Optional environment variables:

Variable	Default	Meaning
AGENTGUARD_MCP_DAILY_CAP_CENTS	500	Hard per-day spend cap (block on exceed)
AGENTGUARD_MCP_PER_CALL_CAP_CENTS	100	Hard per-call spend cap (block on exceed)
AGENTGUARD_MCP_TENANT	mcp-local	Tenant scope stamped into receipts

A signing keypair is generated on first run and persisted to ~/.agentguard/mcp-signing.json (0600).

Tools

• spend_decide — gate a model call before it runs. Returns allow/block plus a signed, hash-chained receipt recording model identity, weights origin country (China-origin families such as GLM, DeepSeek, Qwen, and Kimi are flagged automatically), hosting jurisdiction, and retention posture. Unrecognized endpoints (vLLM, Ollama, TGI, your own cluster) route as self-hosted: zero retention, your jurisdiction.
• verify_receipt — independently verify any receipt. Change one signed byte and verification fails.
• export_receipts — dump the session decision log as a verified hash chain. Content-free: safe to hand to an auditor.
• set_model_cost — register pricing for self-hosted models (AgentGuard fails closed on unknown costs).
• provenance_preview — see what would be attested for a model/endpoint without spending.
• spend_status — active caps, tenant, decision count, signer fingerprint.

Why

When agents move from hosted APIs to self-hosted models, the provider's spend dashboard, rate limits, and audit logs disappear with the provider. AgentGuard puts them back, locally, and adds something hosted providers never gave you: a cryptographic receipt an outsider can verify without trusting you or us.

More: https://agentguard.run/sovereign/ and https://agentguard.run/sovereign/guide/

Verify independently

Any receipt can be checked off-platform at https://agentguard.run/verify or with verify_receipt and the signer public key from spend_status.

AgentGuard® is a registered trademark of Dunecrest Ventures Inc. US patent filings pending. This package is governance software, not legal or compliance advice.